Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File:                     B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier:          RRtoNPvk7QHBFfAQAji5H6k3gC6xEZKX7iWc0O6jId4=
Subject key identifier:   C4:40:D2:01:69:FD:94:B5:92:03:5D:A2:21:82:32:04:B7:02:E3:58
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       050B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number:          04EE
Signing time:             Sun 02 Nov 2025 23:47:48 +0000
Manifest this update:     Sun 02 Nov 2025 23:47:48 +0000
Manifest next update:     Sun 09 Nov 2025 23:47:48 +0000
Files and hashes:         1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: 3Fm6aTFHQMa0gpPks7t4Dv/9PdYm6A+w6NmJjbBSj3Q=)
                          2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
                          rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
        Validity
            Not Before: Nov  2 23:47:48 2025 GMT
            Not After : Nov  9 23:47:48 2025 GMT
        Subject: CN=6907eda4-cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:64:b9:96:37:83:91:4b:bb:81:69:56:d0:
                    8c:8a:f5:6d:fb:ba:dc:24:3a:0f:4e:b6:0e:a4:aa:
                    13:8d:03:79:5a:0f:28:4c:66:d9:ed:78:28:4b:cb:
                    ad:08:69:32:45:a7:69:cc:3e:91:45:df:8d:c5:d5:
                    9d:7d:9f:c2:9d:b9:d3:6e:e4:61:ce:03:d0:c7:30:
                    d3:c0:74:78:b5:ad:d4:df:8f:18:68:36:86:f9:01:
                    39:e3:e8:d0:3b:11:10:51:46:86:08:e0:f4:69:cb:
                    db:ad:bf:8b:3b:14:39:13:96:79:ef:f7:f5:57:24:
                    87:8b:60:8a:1a:cb:fa:dc:c7:b5:18:26:11:a8:b3:
                    e4:2d:d8:83:40:4d:d1:7c:9b:3b:89:b0:f0:1c:ed:
                    1e:d2:24:8a:af:50:90:57:95:c6:bb:5f:d0:32:8b:
                    c5:56:cb:66:05:e9:21:9e:82:bf:95:6e:99:40:37:
                    0b:3a:a6:8a:43:df:d1:6f:30:e9:a9:b0:f3:0a:db:
                    52:10:76:8e:71:b4:1b:21:3f:c0:dc:3f:6f:d2:16:
                    f1:88:c2:82:3f:80:52:45:7a:e2:0c:6b:79:e7:7a:
                    0f:8a:c9:fe:59:e9:ef:7e:25:38:ae:aa:f1:75:bf:
                    ac:55:5f:ea:3f:5c:02:24:86:6d:b0:d2:6d:01:f8:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:40:D2:01:69:FD:94:B5:92:03:5D:A2:21:82:32:04:B7:02:E3:58
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:85:a5:91:e5:79:b6:43:77:36:36:b5:f8:be:2f:4c:a0:
         a7:e6:a1:4f:cf:46:70:be:43:9f:c5:84:8f:8a:b7:c3:01:65:
         4d:e4:de:b1:1b:b4:98:ff:55:6d:cd:ab:15:db:28:bf:e8:58:
         8a:b4:5f:89:ba:5b:68:b3:d5:bf:66:db:a6:11:e3:3a:39:79:
         9d:04:71:7a:d5:4d:e9:2c:ce:68:ec:f6:db:85:37:97:d0:d7:
         cd:b1:23:89:f4:6f:2c:8d:c7:d0:c5:1b:fb:61:60:d3:0b:9f:
         aa:86:a5:de:39:63:2d:78:cc:46:ce:d6:44:08:33:b9:7d:79:
         5d:2e:4a:a2:7f:35:42:ba:8b:59:dc:52:6d:60:7e:d7:71:db:
         b6:5a:10:dd:32:15:d7:32:d5:04:1b:28:9f:f3:73:91:f3:27:
         57:38:a3:19:98:17:53:f3:45:4f:9e:32:6c:6c:b7:0c:c5:25:
         64:3c:af:c0:aa:c2:d9:e6:ec:98:e8:d6:b4:b7:46:e9:07:5e:
         19:aa:d8:69:63:52:42:ef:b3:c0:d8:52:6d:6f:c0:c2:40:80:
         d3:5f:fa:c6:bd:7c:0f:68:18:d8:93:92:48:29:36:4b:1c:05:
         1c:8d:03:ef:61:da:f4:7c:43:36:4a:08:5a:cb:d7:8c:34:78:
         bf:07:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:34:52 2025 by rpki-client